Harden security

3 years ago · 774c2a98b0
parent fa8357a0bc
commit 774c2a98b0
1 changed files with 3 additions and 0 deletions
--- a/api/api.service
+++ b/api/api.service
@ -8,6 +8,9 @@ WorkingDirectory=/home/nextgen
 ExecStart=/home/nextgen/api
 Restart=always
 RestartSec=30
+PrivateTmp=yes
+NoNewPrivileges=true
+PrivateDevices=yes

 [Install]
 WantedBy=multi-user.target